June 2019 - Xymon - Xymon mailman web

Raw Data?
by wes.neal＠verizon.com 18 Jun '19

18 Jun '19

So I can see a CPU graph with the various data points in it. Is there a file that has the raw data that the graph is generated from, which I assume would be the data from each 5 minute client check. Thanks in advance Wes

1 0

Disk monitoring
by EDSchminke＠Hormel.com 17 Jun '19

17 Jun '19

What I have found is that the user running "df" against a given file system must have execute permissions on every directory from the parent directory of the mount point all the way back to / e.g. For file system mounted at /really/long/path/mountpoint All directories leading up to it... /really/long/path /really/long /really / ...must have +x permissions. Whether you do that at owner, group, or other permissions is a determination you're going to have to make for yourself. You could add the xymon user to the group assigned to those directories, but if the group has write access to those directories, that could be a security liability for your database. You could do it on "other" permissions, but that would give everyone with access to your system execute access to those directories, giving them the ability to "cd" into them. That may or may not be a problem for you. The third option would be to look into whether your system supports ACLs and through those give just the xymon user +x permissions to just those directories. Were it me doing it, that would be my preference. Erik D. Schminke | Associate Systems Programmer Hormel Foods Corporation | One Hormel Place | Austin, MN 55912 Phone: (507) 434-6817 edschminke at hormel.com | www.hormelfoods.com

1 0

http content check fails
by schritte＠ub.uni-frankfurt.de 17 Jun '19

17 Jun '19

Hi to all, two services for http content check failed suddenly and I cannot find the reason why. The webpages checked and their content are correct, I can see them with a browser or wget. "Conn" and "SSL certificate check" are working correctly. The messages I see in xymond.chk: Failed to get webpage\n\nAn error occurred while testing <a href="https://...." .... Failed to get webpage\n\nContent check failed\n\nNo output received from server Nothing in log directory of the server. Any ideas how to debug that or where to look at? entry in hosts.cfg: 0.0.0.0 <dns name> # testip HIDEHTTP cont=Portal;https://.... I tried it with the actual IP instead of 0.0.0.0 as well, same result. Help appreciated, cheers Rolf -- Mit freundlichen Grüßen Rolf Schrittenlocher Lokales Bibliothekssystem Frankfurt Bockenheimer Landstr. 134-138, 60325 Frankfurt Tel LBS: (49) 69 - 798 28830 Tel persönlich: (49) 69 - 798 28908 LBS: lbs-it at ub.uni-frankfurt.de Persönlich: schritte at ub.uni-frankfurt.de

1 0

IP address
by ljswan＠mweb.co.za 16 Jun '19

16 Jun '19

Good day, Is there a way to change the ip address of the xymon server? I changed the ip address and now xymon server is not working any more. Any ideas anyone? Thank you in advance. Thank You, Leon

5 14

Disk monitoring
by mschultheiss＠ivytech.edu 15 Jun '19

15 Jun '19

We had one of our postgres database servers go offline this morning since its data partition got 100% full. Xymon didn't alert us since the xymon client was running as user xymon and didn't have permission to the postgres data directory (i.e. df gave a permission denied). I worked around it by changing the client on this server to run as root rather than xymon but is there a better way to give the client privileged access to do its checks than running the client as root? -- ------------------------------------------------------------- Michael Schultheiss, RHCSA, RHCE OIT Administration Sr. Unix Systems Engineer Ivy Tech Community College schultmc at ivytech.edu

2 1

IP address
by EDSchminke＠Hormel.com 14 Jun '19

14 Jun '19

What exactly do you not see working? Xymon really has a number of moving pieces that all work together. From a network perspective, there is Xymon daemon and a Web server. The Xymon daemon accepts and routes messages from clients. Other components processes those messages and ultimately static HTML pages get generated. Then a web server serves up those HTML pages for you to view. Based on the netstat output you posted, I'm guessing the Xymon daemon is (probably) accepting and processing messages just fine, but when you attempt to view the Web interface, you're not seeing anything. Something (I'm assuming Xymon) is binding to the standard port on "any configured IP address" (0.0.0.0:1984), but I'm not seeing anything LISTENING on port 80 or 443. Going to be hard to view the web interface without that. What OS (and version) are you running this from? What did you use for a Web server? Apache? Nginx?

1 0

Powershell windows client bug
by stef.coene＠docum.org 13 Jun '19

13 Jun '19

Hi, I had some strange error when sending the data via xymoncgimsg.cgi. Using port 1984 was working fine. The procs check was giving this error: "Expected string Name not found in ps output header" When comparing the data I found out that the \r was not stripped when using xymoncgimsg.cgi. So the solution was to strip the \r from the output. I inserted this line at line 3020 to solve my issue: $msg = $msg.Replace("`r","") Stef

1 0

Files removed from analysis.cfg still show in Files page
by misc_spam＠yahoo.com 13 Jun '19

13 Jun '19

We'd been monitoring a set of files for presence and age using the following in analysis.cfg. FILE /adabckcurrent/db038.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db041.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db042.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db043.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db044.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db045.adabck red mtime<122400 TIME=*:0530:1730 all the file links on the File page show the appropriate info as expected for each [file:/adabckcurrent/db0XX.adabck] type:100000 (file) mode:664 (-rw-rw-r--) linkcount:1 owner:1003 (sag) group:1003 (sag) size:65968430564 clock:1560369713 (2019/06/12-15:01:53) atime:1560342550 (2019/06/12-07:29:10) ctime:1560342832 (2019/06/12-07:33:52) mtime:1560342832 (2019/06/12-07:33:52) we've since eliminated some of these files and have commented the appropriate lines in analysis.cfg. FILE /adabckcurrent/db038.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db041.adabck red mtime<122400 TIME=*:0530:1730 # FILE /adabckcurrent/db042.adabck red mtime<122400 TIME=*:0530:1730 # FILE /adabckcurrent/db043.adabck red mtime<122400 TIME=*:0530:1730 # FILE /adabckcurrent/db044.adabck red mtime<122400 TIME=*:0530:1730 FILE /adabckcurrent/db045.adabck red mtime<122400 TIME=*:0530:1730 While we don't get any errors for these files in the Files page, they still show in the Files page, and clicking on the link shows: [file:/adabckcurrent/db042.adabck] ERROR: No such file or directory Is there a way to have these three files no longer show in the Files page?

2 2

URL error
by ljswan＠mweb.co.za 13 Jun '19

13 Jun '19

Good day, When I go to the URL <ip address>/xymon/xymon.html, I get the error below. The requested URL /xymon/xymon.html was not found on this server. Here is my config file. /etc/apache2/sites-available/xymon.conf <VirtualHost *:80> ServerAdmin webmaster at localhost DocumentRoot /usr/lib/xymon/server/www/ ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined Alias /xymon/ "/usr/lib/xymon/server/www/" <Directory "/usr/lib/xymon/server/www/"> AllowOverride all Options Indexes FollowSymLinks Includes MultiViews Order allow,deny Allow from all </Directory> ScriptAlias /xymon-cgi/ "/usr/lib/xymon/cgi-bin/" <Directory "/usr/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI Includes Order allow,deny Allow from all </Directory> ScriptAlias /xymon-seccgi/ "/usr/lib/xymon/cgi-secure/" <Directory "/usr/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI Includes Order allow,deny Allow from all # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /usr/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /usr/lib/xymon/server/etc/xymonpasswd USERNAME" AuthUserFile /usr/lib/xymon/server/etc/xymonpasswd AuthType Basic AuthName "Xymon Administration" Require valid-user </Directory> Any ideas? Thank You, Leon

2 4

Test for all but one host
by tlwilliams4＠vcu.edu 12 Jun '19

12 Jun '19

I haven't used this specifically, but I think you want to use the EXHOST= statement. CLASS=powershell SVC bbagent status=started EXHOST=server2 Let us know if that works. Tim Williams On Wed, Jun 5, 2019 at 4:18 PM Jaime Kikpole via Xymon <xymon at xymon.com> wrote: > > > > ---------- Forwarded message ---------- > From: Jaime Kikpole <jkikpole at cairodurham.org> > To: xymon at xymon.com > Cc: > Bcc: > Date: Wed, 5 Jun 2019 16:17:31 -0400 > Subject: Test for all but one host > I want to set up a SVC test for all hosts where CLASS=powershell, except > for one host. Is there a clean way to do this or will I have to set up a > HOST=... entry for every system? > > For example, I wanted to do this: > CLASS=powershell > SVC bbagent status=started > > However, one and only one system doesn't run bbagent. So is there some > kind of "cancel the default" override I can use? Or will I have to do this: > HOST=server1 > SVC bbagent status=started > HOST=server3 > SVC bbagent status=started > > Thanks in advance! > > > > Jaime Kikpole > > Director of Technology & Innovations > Cairo-Durham Central School District > (518) 622-8543, x59500 > cairodurham.org <http://www.cairodurham.org> > > Technical Support: > help at cairodurham.org > go.cairodurham.org/techtips > > [image: Google Certified Educator, Level 1] [image: Google Certified > Educator, Level 2] > > This electronic message and any attachment(s) may contain confidential or > legally privileged information protected by law from further disclosure and > is intended only for the individual or entity identified above as the > addressee. If you are not the addressee (or the employee or agency > responsible to deliver it to the addressee), or if this message has been > addressed to you in error, you are hereby notified that you may not copy, > forward, disclose or use any part of this message or any attachment(s). > Please notify the sender immediately by return email or telephone and > permanently delete this message and attachment(s) from your system. > > > ---------- Forwarded message ---------- > From: Jaime Kikpole via Xymon <xymon at xymon.com> > To: xymon at xymon.com > Cc: > Bcc: > Date: Wed, 5 Jun 2019 16:17:31 -0400 > Subject: [Xymon] Test for all but one host > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon >

2 1